i don't see secure messaging in your profile neither :)
saint
at least this is the format i am using.
not all the users put their matrix username in Lemmy. also - at least in desktop when clicking send secure message it brings up matrix client for me (element)
in lemmy at least in the user profile you can see send secure message - if it is there (meaning - user has added matrix username) - you can click and send message via matrix
usually i add more than 1 ip and also vultr firewall can be managed to change ip. tailscale can be used as well. there are options!
if you configure ssh access only from your home ip - then fail2ban is not needed.
sorry, this is kinda like a firewall, but protecting websites, so many vulnerabilities are filtered out. it does not protect you 100% percent (nothing does). it might be hard to setup, in that case there is an option to use waf as a service, i.e. - cloudflare has such offering, maybe there are others as well. i have looked into vultr - they seem to offer only a "usual" type of firewall, not http/application based.
Any observed impact to performance?
not good, sometimes still trying to use it and get lost from time to time
midnight commander, especially if i need to delete files/dirs with '-' and non-ascii characters. i do it without thinking.
maybe you could just add it to your bio ;)